Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/hQopmrkHC65ynCHpkv3FPFAWKOg.roa
File: hQopmrkHC65ynCHpkv3FPFAWKOg.roa (raw, json)
Hash identifier: P4gtVJxrQvce0nBug3ceySUeVYW9DBfKUaOsVoLFIIc=
Subject key identifier: 85:0A:29:9A:B9:07:0B:AE:72:9C:21:E9:92:FD:C5:3C:50:16:28:E8
Certificate issuer: /CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Certificate serial: 018AFC24B23FD13F7F9364CAFE5B0B1B95C1
Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/hQopmrkHC65ynCHpkv3FPFAWKOg.roa
Signing time: Wed 04 Oct 2023 19:22:57 +0000
ROA not before: Wed 04 Oct 2023 19:22:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208126
IP address blocks: 185.84.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fc:24:b2:3f:d1:3f:7f:93:64:ca:fe:5b:0b:1b:95:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3
Validity
Not Before: Oct 4 19:22:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=850a299ab9070bae729c21e992fdc53c501628e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:75:56:d0:6f:50:67:2f:30:cc:12:bf:bf:e0:
be:59:4c:57:35:4d:76:38:f0:cb:cd:6b:36:f6:d7:
3b:4b:b8:36:eb:5c:23:ab:77:03:8c:f9:1d:7c:2f:
e7:fe:89:8f:54:d1:bd:4f:50:21:5c:ac:e2:42:85:
8b:3c:47:ac:84:11:13:43:76:9e:29:58:bf:58:1f:
1f:c1:7b:d4:78:9e:84:02:b9:a9:8b:54:bf:b9:c6:
75:85:75:c1:e2:ed:81:df:b0:2a:82:46:1f:a1:ea:
d4:ef:04:a1:e6:bb:31:4d:d2:9f:27:e2:99:59:69:
95:65:be:ec:ff:da:27:d9:a6:f4:8e:1f:eb:d5:82:
4c:75:84:98:46:04:e4:96:81:55:a3:fc:3d:83:72:
1d:9c:49:ab:ed:f7:c0:b7:1b:45:21:d3:f7:45:39:
4c:23:5e:18:43:4a:a8:d9:9c:31:30:e0:c7:b9:a7:
e4:11:75:1a:c0:6e:97:f1:b7:65:b1:16:ed:ed:b6:
07:2b:ee:1a:ff:1f:bb:fe:ae:4c:73:af:9e:4b:35:
60:78:14:c9:26:4e:3e:95:df:46:ea:e7:ce:9f:ae:
72:5b:b6:cf:66:dc:95:e7:7b:90:c7:89:a6:5e:a8:
69:12:8e:64:d0:e6:d0:a3:e2:c9:74:d5:0a:06:19:
12:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0A:29:9A:B9:07:0B:AE:72:9C:21:E9:92:FD:C5:3C:50:16:28:E8
X509v3 Authority Key Identifier:
keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/hQopmrkHC65ynCHpkv3FPFAWKOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.227.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:53:41:a8:4c:74:65:4e:ee:6c:d8:2d:a9:18:2d:92:10:cb:
9c:93:c1:40:81:44:52:38:b8:7e:05:02:fb:06:9c:77:c0:7a:
15:00:ec:bb:17:e7:e3:f5:28:b9:ec:f7:91:c2:cf:70:45:14:
44:89:1d:5f:82:11:8c:05:a7:0f:34:2b:f8:96:56:f1:e9:c2:
0d:1d:ba:83:d5:e7:2f:ec:44:27:91:9a:25:d2:cf:a7:ac:83:
ad:7c:8b:80:76:09:19:5d:62:8b:e0:0f:4c:55:a1:56:b7:19:
a6:18:a7:e5:b0:86:eb:e2:6f:04:ea:ba:98:96:81:6f:f7:07:
ce:e9:f5:8f:5f:11:2f:a2:50:3a:43:27:ea:c4:18:4a:26:7d:
56:92:77:2f:db:05:0b:38:15:30:b1:0c:0b:af:e0:cf:58:e9:
ca:da:15:c2:98:16:06:7b:22:40:69:dd:5c:7f:96:e2:0d:b9:
f8:db:ca:c3:a4:4b:71:23:85:54:fe:93:fa:17:4c:ff:92:1f:
f4:b3:40:6b:a1:fd:a9:47:9b:ef:72:0a:94:5e:91:0e:a9:8b:
e3:e4:89:da:6e:e8:34:fe:a4:d6:91:1a:01:0c:c7:cf:46:0d:
48:e9:a2:9d:1f:13:1c:33:37:bf:9c:ff:8a:28:a1:03:a7:21:
a3:17:ae:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 07:26:32 2023 by rpki-client on console-fra.rpki-client.org